$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32382e302f32342d3234203d3e203538333839.roa File: 3130332e31312e32382e302f32342d3234203d3e203538333839.roa (raw, json) Hash identifier: bn/xE53eYcGasC57CrOfrEV0w66F/6NQ4fTKuxt78DQ= Subject key identifier: 49:20:A0:FE:F7:B2:D4:D7:7B:52:78:CD:BA:4A:01:68:7A:C2:E1:0E Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 1E67E019BFE4020A7EE973307CA783C46680962A Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32382e302f32342d3234203d3e203538333839.roa Signing time: Thu 29 Jan 2026 02:58:04 +0000 ROA not before: Thu 29 Jan 2026 02:53:04 +0000 ROA not after: Thu 28 Jan 2027 02:58:04 +0000 asID: 58389 IP address blocks: 103.11.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 13:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:67:e0:19:bf:e4:02:0a:7e:e9:73:30:7c:a7:83:c4:66:80:96:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jan 29 02:53:04 2026 GMT Not After : Jan 28 02:58:04 2027 GMT Subject: CN=4920A0FEF7B2D4D77B5278CDBA4A01687AC2E10E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:65:de:63:30:b6:4f:2c:20:9a:db:25:db: f6:5f:15:71:f7:ea:94:e1:7e:3b:59:3b:f5:65:ec: 65:c3:3e:79:65:13:b9:dd:cd:ea:c1:0e:ab:9c:1b: 38:b8:0c:43:12:05:4f:be:53:03:81:c2:24:f8:94: 80:b2:bb:15:6f:d1:79:c5:9c:98:47:01:fd:49:1e: c0:44:9c:dc:25:df:cf:a8:06:12:58:e4:9d:09:71: 48:aa:99:c8:76:c3:08:5b:da:4c:67:e3:25:d9:1f: 6e:c9:f4:c0:77:07:d9:d8:0d:88:2d:65:a5:e7:ed: 73:39:f9:5b:98:23:c5:20:2b:89:7e:42:e4:2c:71: 38:9b:e4:a4:5c:6c:81:8f:5f:e1:19:7e:c7:6b:b8: 01:e8:b9:fb:ad:be:d7:88:38:71:d8:cd:43:94:88: b7:d6:29:4f:bf:54:5e:a8:ea:ff:1c:79:c5:bb:19: 9c:39:2a:7c:1b:68:8c:ab:85:5d:bd:c5:8f:d7:7a: ff:ab:09:65:15:f4:a7:4c:07:93:21:bd:00:6f:26: 84:3b:e8:d3:50:74:1e:ab:ef:30:c7:02:02:33:c0: 26:b5:39:79:d8:95:cc:c6:1f:e4:98:5b:c2:b9:f1: 91:fc:10:93:4e:00:f1:f9:05:23:c5:83:b3:06:c7: f6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:20:A0:FE:F7:B2:D4:D7:7B:52:78:CD:BA:4A:01:68:7A:C2:E1:0E X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32382e302f32342d3234203d3e203538333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.28.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:60:e3:40:fe:14:99:56:68:2c:be:06:51:fc:1d:b9:6f:5a: bb:20:da:46:a7:f5:a3:0a:d2:64:7b:6c:ac:78:17:60:2a:c9: a3:58:1a:a7:db:51:96:fb:9e:93:d4:d1:1b:78:bb:ed:39:0a: 66:f4:ea:08:9e:44:7e:7a:9c:ce:fa:e6:5e:93:a0:90:08:96: 88:7a:04:96:8b:fd:cf:6a:16:76:a2:6d:f1:ed:be:56:fa:76: d6:b9:04:28:71:1a:18:a6:e4:2f:46:e3:bf:6d:e2:2a:b1:56: d4:6f:1d:77:71:f1:ca:20:88:3f:b6:25:0a:c0:cd:0f:dc:20: 88:12:10:77:1e:35:8e:c9:6c:90:b9:bd:37:96:3a:58:0d:b3: 49:4e:d3:45:7c:6b:97:cc:f9:16:e2:e7:ee:41:43:15:46:b0: 06:ef:e7:c9:9e:04:65:42:ee:a3:8b:74:1e:f3:d0:e3:7f:06: 0e:dd:45:71:d6:a1:15:b1:ac:ca:31:dd:d3:be:42:5c:16:56: 36:5d:42:9e:89:59:c0:9f:d0:97:b4:de:3a:29:ac:a0:30:79: a5:99:0d:c5:61:56:43:18:6a:5b:52:f3:9a:bf:85:64:35:b5: 3f:65:b8:e7:91:fa:2a:dc:fe:2d:e2:11:87:09:4c:d8:39:a8: d9:13:5a:b0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHmfgGb/kAgp+6XMwfKeDxGaAliowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNjAxMjkwMjUzMDRaFw0yNzAxMjgwMjU4MDRaMDMxMTAvBgNV BAMTKDQ5MjBBMEZFRjdCMkQ0RDc3QjUyNzhDREJBNEEwMTY4N0FDMkUxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQS2XeYzC2Tywgmtsl2/ZfFXH3 6pThfjtZO/Vl7GXDPnllE7ndzerBDqucGzi4DEMSBU++UwOBwiT4lICyuxVv0XnF nJhHAf1JHsBEnNwl38+oBhJY5J0JcUiqmch2wwhb2kxn4yXZH27J9MB3B9nYDYgt ZaXn7XM5+VuYI8UgK4l+QuQscTib5KRcbIGPX+EZfsdruAHoufutvteIOHHYzUOU iLfWKU+/VF6o6v8cecW7GZw5KnwbaIyrhV29xY/Xev+rCWUV9KdMB5MhvQBvJoQ7 6NNQdB6r7zDHAgIzwCa1OXnYlczGH+SYW8K58ZH8EJNOAPH5BSPFg7MGx/bFAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUSSCg/vey1Nd7UnjNukoBaHrC4Q4wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMTJlMzIzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCxwwDQYJKoZIhvcN AQELBQADggEBAJ1g40D+FJlWaCy+BlH8HblvWrsg2kan9aMK0mR7bKx4F2AqyaNY GqfbUZb7npPU0Rt4u+05Cmb06gieRH56nM765l6ToJAIloh6BJaL/c9qFnaibfHt vlb6dta5BChxGhim5C9G479t4iqxVtRvHXdx8cogiD+2JQrAzQ/cIIgSEHceNY7J bJC5vTeWOlgNs0lO00V8a5fM+Rbi5+5BQxVGsAbv58meBGVC7qOLdB7z0ON/Bg7d RXHWoRWxrMox3dO+QlwWVjZdQp6JWcCf0Je03joprKAweaWZDcVhVkMYaltS85q/ hWQ1tT9luOeR+irc/i3iEYcJTNg5qNkTWrA= -----END CERTIFICATE-----Generated at Mon Mar 2 08:25:59 2026 by rpki-client